EasyCMS Cross-Site Scripting Vulnerability

EasyCMS is a lightweight scalable open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in EasyCMS version 1.3. A remote attacker can use the 's' POST parameter in the index.php?s=/index/search/index.html request to inject arbitrary Web script or HM...